From e8505d829b67dc13be301eee2acfc5fc92f09634 Mon Sep 17 00:00:00 2001 From: Ludwig Nussel Date: Wed, 20 Apr 2011 14:12:26 +0200 Subject: [PATCH] allow TLS only --- osc/oscssl.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/osc/oscssl.py b/osc/oscssl.py index e053838c..70906140 100644 --- a/osc/oscssl.py +++ b/osc/oscssl.py @@ -154,7 +154,7 @@ class mySSLContext(SSL.Context): def __init__(self): SSL.Context.__init__(self, 'sslv23') - self.set_options(m2.SSL_OP_ALL | m2.SSL_OP_NO_SSLv2) # m2crypto does this for us but better safe than sorry + self.set_options(m2.SSL_OP_ALL | m2.SSL_OP_NO_SSLv2 | m2.SSL_OP_NO_SSLv3) self.set_session_cache_mode(m2.SSL_SESS_CACHE_CLIENT) self.verrs = None #self.set_info_callback() # debug